dineway 0.2.25 → 0.2.27

package/dist/media/image-endpoint.mjs

@@ -1,4 +1,4 @@
-import { t as INTERNAL_MEDIA_PREFIX } from "../normalize-Cyt7JdF7.mjs";
+import { t as INTERNAL_MEDIA_PREFIX } from "../normalize-BY2gOygP.mjs";
 
 //#region src/media/image-endpoint.ts
 /**

package/dist/media/index.d.mts

@@ -1,4 +1,4 @@
-import { _ as MediaValue, a as ComponentEmbed, b as mediaItemToValue, c as EmbedResult, d as MediaListResult, f as MediaProvider, g as MediaUploadInput, h as MediaProviderItem, i as AudioEmbed, l as ImageEmbed, m as MediaProviderDescriptor, n as generatePlaceholder, o as CreateMediaProviderFn, p as MediaProviderCapabilities, r as normalizeMediaValue, s as EmbedOptions, t as PlaceholderData, u as MediaListOptions, v as ThumbnailOptions, y as VideoEmbed } from "../placeholder-BsYSFPjY.mjs";
+import { _ as MediaValue, a as ComponentEmbed, b as mediaItemToValue, c as EmbedResult, d as MediaListResult, f as MediaProvider, g as MediaUploadInput, h as MediaProviderItem, i as AudioEmbed, l as ImageEmbed, m as MediaProviderDescriptor, n as generatePlaceholder, o as CreateMediaProviderFn, p as MediaProviderCapabilities, r as normalizeMediaValue, s as EmbedOptions, t as PlaceholderData, u as MediaListOptions, v as ThumbnailOptions, y as VideoEmbed } from "../placeholder-0cGpMonY.mjs";
 
 //#region src/media/enrich.d.ts
 /**

package/dist/media/index.mjs

@@ -1,5 +1,5 @@
-import { n as normalizeMediaValue } from "../normalize-Cyt7JdF7.mjs";
-import { n as generatePlaceholder, t as enrichImageMetadata } from "../enrich-Ck9tfMqe.mjs";
+import { n as normalizeMediaValue } from "../normalize-BY2gOygP.mjs";
+import { n as generatePlaceholder, t as enrichImageMetadata } from "../enrich-Uw_OA9Ve.mjs";
 
 //#region src/media/types.ts
 /**

package/dist/media/local-runtime.d.mts

@@ -1,14 +1,14 @@
-import "../types-BkQ-l1Y5.mjs";
-import { t as Database } from "../types-C8cUW9dh.mjs";
-import { h as MediaProviderItem, o as CreateMediaProviderFn } from "../placeholder-BsYSFPjY.mjs";
-import "../runner-BITx7yBF.mjs";
-import "../index-NdJMMO48.mjs";
-import "../types-C2LBO0t8.mjs";
-import { d as Storage } from "../types-Gd4kXLsa.mjs";
-import "../public-url-DFX2c_20.mjs";
-import "../validate-Bc9gaua6.mjs";
-import "../byline-fields-HoyRUnBy.mjs";
-import "../types-BaKec6bx.mjs";
+import "../types-BcpWwh4c.mjs";
+import { t as Database } from "../types-B2W3CeZN.mjs";
+import { h as MediaProviderItem, o as CreateMediaProviderFn } from "../placeholder-0cGpMonY.mjs";
+import "../runner-o39FihbH.mjs";
+import "../index-DNNw5fp0.mjs";
+import "../types-BdsNqnHA.mjs";
+import { d as Storage } from "../types-D8iukuuI.mjs";
+import "../public-url-UpDevWVD.mjs";
+import "../validate-BiPYhXNZ.mjs";
+import "../byline-fields-BJ5_tYj8.mjs";
+import "../types-ZdWRfUsC.mjs";
 import "../index.mjs";
 import { Kysely } from "kysely";
 

package/dist/media/local-runtime.mjs

@@ -1,6 +1,6 @@
 import "../base64-F8-DUraK.mjs";
-import "../types-C9F2TLQV.mjs";
-import { t as MediaRepository } from "../media-D8pQJSug.mjs";
+import "../types-CFvpEEOl.mjs";
+import { t as MediaRepository } from "../media-4xtXwq7L.mjs";
 
 //#region src/media/local-runtime.ts
 /**

package/dist/{media-D8pQJSug.mjs → media-4xtXwq7L.mjs}

@@ -1,4 +1,4 @@
-import { i as encodeCursor, r as decodeCursor } from "./types-C9F2TLQV.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-CFvpEEOl.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 

package/dist/{media-allowlist-9u_gxMG2.mjs → media-allowlist-BdbIzYO3.mjs}

@@ -1,4 +1,4 @@
-import { r as parseAllowedMimeTypes } from "./mime-C0vOHFm7.mjs";
+import { r as parseAllowedMimeTypes } from "./mime-Bg7yUeHW.mjs";
 
 //#region src/api/handlers/media-allowlist.ts
 /**

package/dist/{menus-3B-PGTX3.mjs → menus-CRmcWAM5.mjs}

@@ -1,7 +1,7 @@
-import { a as __exportAll } from "./runner-BWZ87FK-.mjs";
+import { a as __exportAll } from "./runner-CQnzfBpD.mjs";
 import { n as getI18nConfig } from "./config-CVssduLe.mjs";
 import { c as invalidateMenuObjectCache } from "./object-cache-D51qOseS.mjs";
-import { t as withTransaction } from "./transaction-Chz7SBGr.mjs";
+import { t as withTransaction } from "./transaction-L0tzAOfM.mjs";
 import { ulid } from "ulidx";
 
 //#region src/database/repositories/menu.ts

package/dist/{menus-DSWeEWXl.mjs → menus-Cu3TUXyl.mjs}

@@ -1,11 +1,11 @@
 import { t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
-import { r as getDb } from "./loader-BCr2VSzt.mjs";
+import { r as getDb } from "./loader-CsX5pTud.mjs";
 import { n as cachedQuery, t as CacheNamespace } from "./object-cache-D51qOseS.mjs";
-import { t as CommentRepository } from "./comment-BX6H4NF-.mjs";
-import { r as requestCached } from "./request-cache-CBFjCwSt.mjs";
-import { n as resolveLocaleChain, t as resolveLocale } from "./resolve-CThKf9_X.mjs";
-import { n as sanitizeHref } from "./url-C05Zz4pW.mjs";
-import { t as CommentReactionRepository } from "./comment-reaction-QSENU_3S.mjs";
+import { t as CommentRepository } from "./comment-DuDtCn-f.mjs";
+import { r as requestCached } from "./request-cache-DoT2mKBT.mjs";
+import { n as resolveLocaleChain, t as resolveLocale } from "./resolve-BDWXnk_V.mjs";
+import { n as sanitizeHref } from "./url-CmjWycVK.mjs";
+import { t as CommentReactionRepository } from "./comment-reaction-NZjadbiB.mjs";
 import { sql } from "kysely";
 
 //#region src/comments/ranking.ts

package/dist/{oauth-authorization-CMU5kREy.mjs → oauth-authorization-TG2Kxgur.mjs}

@@ -1,8 +1,8 @@
-import { t as withTransaction } from "./transaction-Chz7SBGr.mjs";
-import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-CbMAy6xF.mjs";
-import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-EYZRNkRR.mjs";
-import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "./oauth-clients-CLdR0WyA.mjs";
-import { t as lookupUserRoleAndStatus } from "./oauth-user-lookup-CP16vyFW.mjs";
+import { t as withTransaction } from "./transaction-L0tzAOfM.mjs";
+import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-CZ472rzA.mjs";
+import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-DOo7QDRn.mjs";
+import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "./oauth-clients-DLJMG4h7.mjs";
+import { t as lookupUserRoleAndStatus } from "./oauth-user-lookup-D2NAYPjU.mjs";
 import { clampScopes, computeS256Challenge, secureCompare } from "@dineway-ai/auth";
 import { generateCodeVerifier } from "arctic";
 

package/dist/{oauth-clients-CLdR0WyA.mjs → oauth-clients-DLJMG4h7.mjs}

@@ -1,5 +1,5 @@
-import { s as validateScopes } from "./api-tokens-CbMAy6xF.mjs";
-import { o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-EYZRNkRR.mjs";
+import { s as validateScopes } from "./api-tokens-CZ472rzA.mjs";
+import { o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-DOo7QDRn.mjs";
 
 //#region src/api/oauth/redirect-uri.ts
 /**

package/dist/object-cache/memory.d.mts

@@ -1,4 +1,4 @@
-import { t as CreateObjectCacheBackendFn } from "../types-DY9lJRpo.mjs";
+import { t as CreateObjectCacheBackendFn } from "../types-B-KSspMO.mjs";
 
 //#region src/object-cache/memory.d.ts
 /**

package/dist/page/index.d.mts

@@ -1,13 +1,13 @@
-import { Dt as PublicSchemaNode, Et as PublicPageSchema, F as PageMetadataContribution, M as PageFragmentContribution, Tt as PublicPageImage, wt as PublicPageContext } from "../types-BkQ-l1Y5.mjs";
-import "../types-C8cUW9dh.mjs";
-import "../runner-BITx7yBF.mjs";
-import "../index-NdJMMO48.mjs";
-import "../types-C2LBO0t8.mjs";
-import "../public-url-DFX2c_20.mjs";
-import "../validate-Bc9gaua6.mjs";
-import "../byline-fields-HoyRUnBy.mjs";
-import "../types-BaKec6bx.mjs";
-import { _ as CreatePublicPageContextInput, a as generateSiteSeoContributions, c as ResolvedPageMetadata, d as renderPageMetadata, f as resolvePageMetadata, g as resolvePageImage, h as imageMetadataContributions, i as generateBaseSeoContributions, l as createSha256CspHash, m as mergePageSchema, n as buildWebSiteJsonLd, o as renderFragments, p as safeJsonLdSerialize, r as cleanJsonLd, s as resolveFragments, t as buildBlogPostingJsonLd, u as escapeHtmlAttr, v as createPublicPageContext } from "../jsonld-CfUj_enm.mjs";
+import { Dt as PublicSchemaNode, Et as PublicPageSchema, F as PageMetadataContribution, M as PageFragmentContribution, Tt as PublicPageImage, wt as PublicPageContext } from "../types-BcpWwh4c.mjs";
+import "../types-B2W3CeZN.mjs";
+import "../runner-o39FihbH.mjs";
+import "../index-DNNw5fp0.mjs";
+import "../types-BdsNqnHA.mjs";
+import "../public-url-UpDevWVD.mjs";
+import "../validate-BiPYhXNZ.mjs";
+import "../byline-fields-BJ5_tYj8.mjs";
+import "../types-ZdWRfUsC.mjs";
+import { _ as CreatePublicPageContextInput, a as generateSiteSeoContributions, c as ResolvedPageMetadata, d as renderPageMetadata, f as resolvePageMetadata, g as resolvePageImage, h as imageMetadataContributions, i as generateBaseSeoContributions, l as createSha256CspHash, m as mergePageSchema, n as buildWebSiteJsonLd, o as renderFragments, p as safeJsonLdSerialize, r as cleanJsonLd, s as resolveFragments, t as buildBlogPostingJsonLd, u as escapeHtmlAttr, v as createPublicPageContext } from "../jsonld-CxMRDv02.mjs";
 
 //#region src/page/index.d.ts
 /**

package/dist/page/index.mjs

@@ -1,4 +1,4 @@
-import { _ as createPublicPageContext, a as createSha256CspHash, c as resolvePageMetadata, d as buildBlogPostingJsonLd, f as buildWebSiteJsonLd, h as resolvePageImage, i as resolveFragments, l as safeJsonLdSerialize, m as imageMetadataContributions, n as generateSiteSeoContributions, o as escapeHtmlAttr, p as cleanJsonLd, r as renderFragments, s as renderPageMetadata, t as generateBaseSeoContributions, u as mergePageSchema } from "../seo-contributions-BGBehNCN.mjs";
+import { _ as createPublicPageContext, a as createSha256CspHash, c as resolvePageMetadata, d as buildBlogPostingJsonLd, f as buildWebSiteJsonLd, h as resolvePageImage, i as resolveFragments, l as safeJsonLdSerialize, m as imageMetadataContributions, n as generateSiteSeoContributions, o as escapeHtmlAttr, p as cleanJsonLd, r as renderFragments, s as renderPageMetadata, t as generateBaseSeoContributions, u as mergePageSchema } from "../seo-contributions-DzusM9lG.mjs";
 
 //#region src/page/index.ts
 /**

package/dist/{parse-DEG06jjr.mjs → parse-CJC9DGe9.mjs}

@@ -1,4 +1,4 @@
-import { t as apiError } from "./error-Jz0EtEwI.mjs";
+import { t as apiError } from "./error-BPA9T0AW.mjs";
 import { z } from "zod";
 
 //#region src/api/parse.ts

package/dist/plugin-utils.d.mts

@@ -1,12 +1,12 @@
-import "./types-BkQ-l1Y5.mjs";
-import "./types-C8cUW9dh.mjs";
-import "./runner-BITx7yBF.mjs";
-import "./index-NdJMMO48.mjs";
-import "./types-C2LBO0t8.mjs";
-import "./public-url-DFX2c_20.mjs";
-import "./validate-Bc9gaua6.mjs";
-import "./byline-fields-HoyRUnBy.mjs";
-import "./types-BaKec6bx.mjs";
+import "./types-BcpWwh4c.mjs";
+import "./types-B2W3CeZN.mjs";
+import "./runner-o39FihbH.mjs";
+import "./index-DNNw5fp0.mjs";
+import "./types-BdsNqnHA.mjs";
+import "./public-url-UpDevWVD.mjs";
+import "./validate-BiPYhXNZ.mjs";
+import "./byline-fields-BJ5_tYj8.mjs";
+import "./types-ZdWRfUsC.mjs";
 import { DinewayHandlers } from "./astro/types.mjs";
 
 //#region src/plugin-utils.d.ts

package/dist/plugins/adapt-sandbox-entry.d.mts

@@ -1,12 +1,12 @@
-import { Eo as PluginDescriptor, Ft as StandardPluginDefinition, kt as ResolvedPlugin } from "../types-BkQ-l1Y5.mjs";
-import "../types-C8cUW9dh.mjs";
-import "../runner-BITx7yBF.mjs";
-import "../index-NdJMMO48.mjs";
-import "../types-C2LBO0t8.mjs";
-import "../public-url-DFX2c_20.mjs";
-import "../validate-Bc9gaua6.mjs";
-import "../byline-fields-HoyRUnBy.mjs";
-import "../types-BaKec6bx.mjs";
+import { Ft as StandardPluginDefinition, ko as PluginDescriptor, kt as ResolvedPlugin } from "../types-BcpWwh4c.mjs";
+import "../types-B2W3CeZN.mjs";
+import "../runner-o39FihbH.mjs";
+import "../index-DNNw5fp0.mjs";
+import "../types-BdsNqnHA.mjs";
+import "../public-url-UpDevWVD.mjs";
+import "../validate-BiPYhXNZ.mjs";
+import "../byline-fields-BJ5_tYj8.mjs";
+import "../types-ZdWRfUsC.mjs";
 
 //#region src/plugins/adapt-sandbox-entry.d.ts
 /**

package/dist/plugins/adapt-sandbox-entry.mjs

@@ -1,4 +1,4 @@
-import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-U5qGq-iB.mjs";
+import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-owbEUmv1.mjs";
 
 //#region src/plugins/adapt-sandbox-entry.ts
 /**

package/dist/{plugins-D8YxTh9q.mjs → plugins-BC9Rb6PJ.mjs}

@@ -1,11 +1,11 @@
 import { r as validatePluginIdentifier, t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
 import { i as encodeBase64url, n as decodeBase64url } from "./base64-F8-DUraK.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-B-1_U3oF.mjs";
-import { t as OptionsRepository } from "./options-DQPTH5n0.mjs";
-import { n as createPluginContext, t as PluginContextFactory } from "./context-BGt7zfQ-.mjs";
-import { i as parseEncryptionKeys, t as DinewaySecretsError } from "./secrets-Dw3lXI42.mjs";
-import { t as extractRequestMeta } from "./request-meta-DZTiCIQR.mjs";
-import { r as setCronTasksEnabled } from "./cron-BjKHo0QD.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-Bw3_BuVW.mjs";
+import { t as OptionsRepository } from "./options-1dBRkoCl.mjs";
+import { n as createPluginContext, t as PluginContextFactory } from "./context-BET1jeas.mjs";
+import { i as parseEncryptionKeys, t as DinewaySecretsError } from "./secrets-MqvM60s_.mjs";
+import { t as extractRequestMeta } from "./request-meta-DnZm9Kbu.mjs";
+import { r as setCronTasksEnabled } from "./cron-DIsnItPn.mjs";
 import { Migrator, sql } from "kysely";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { ulid } from "ulidx";

package/dist/{preview-Bn59ztjn.mjs → preview-CjL_29aE.mjs}

@@ -1,7 +1,7 @@
-import { n as loadBetterSqlite3, t as createDatabase } from "./connection-CiJWiWya.mjs";
+import { n as loadBetterSqlite3, t as createDatabase } from "./connection-DJ3GzHVH.mjs";
 import { runWithContext } from "./request-context.mjs";
-import { a as verifyPreviewSignature, t as buildPreviewSignatureHeader } from "./sidecar-client-C6ylL-0S.mjs";
-import { t as generatePreviewToken } from "./tokens-DiodRT2y.mjs";
+import { a as verifyPreviewSignature, t as buildPreviewSignatureHeader } from "./sidecar-client-SDgPreXV.mjs";
+import { t as generatePreviewToken } from "./tokens-ShJZm_QS.mjs";
 import { createHash } from "node:crypto";
 import { sql } from "kysely";
 import { ulid } from "ulidx";

package/dist/{provider-loader-jdkZM6xZ.d.mts → provider-loader-CGoW_-Bs.d.mts}

@@ -1,4 +1,4 @@
-import { f as MediaProvider } from "./placeholder-BsYSFPjY.mjs";
+import { f as MediaProvider } from "./placeholder-0cGpMonY.mjs";
 
 //#region src/media/provider-loader.d.ts
 /**

package/dist/public-discovery-CyDzK1-S.mjs

@@ -0,0 +1,30 @@
+import { z } from "zod";
+
+//#region src/schema/public-discovery.ts
+/** A declared discovery boundary, not an authorization policy for CMS reads. */
+const publicDiscoveryRulesSchema = z.object({
+	excludeIfTrue: z.array(z.string().min(1).max(63).regex(/^[a-z][a-z0-9_]*$/)).max(16).refine((fields) => new Set(fields).size === fields.length, "Discovery fields must be unique").optional(),
+	requireLiveRevision: z.boolean().optional()
+}).strict();
+function parsePublicDiscoveryRules(value) {
+	return publicDiscoveryRulesSchema.parse(value);
+}
+/** Reject stale declarations before either SQL discovery or snapshot eligibility runs. */
+function publicDiscoveryExclusions(collection) {
+	const exclusions = (collection.publicDiscovery && parsePublicDiscoveryRules(collection.publicDiscovery))?.excludeIfTrue ?? [];
+	for (const field of exclusions) if (!collection.fields.some((candidate) => candidate.slug === field && candidate.type === "boolean")) throw new Error(`Public discovery for ${collection.slug} requires boolean field ${field}`);
+	return exclusions;
+}
+/**
+* Apply declared exclusions to a native Live record or pre-mutation snapshot.
+* Callers must separately check published/deleted status, SEO and canonical URLs.
+* This does not authorize CMS access or make a Draft snapshot public.
+*/
+function satisfiesPublicDiscoveryRules(collection, content) {
+	const exclusions = publicDiscoveryExclusions(collection);
+	if (collection.publicDiscovery?.requireLiveRevision && !content.liveRevisionId) return false;
+	return exclusions.every((field) => content.data[field] == null || content.data[field] === false || content.data[field] === 0);
+}
+
+//#endregion
+export { satisfiesPublicDiscoveryRules as i, publicDiscoveryExclusions as n, publicDiscoveryRulesSchema as r, parsePublicDiscoveryRules as t };

package/dist/{public-url-DifBmsDt.d.mts → public-url-BPnL5sTj.d.mts}

@@ -1,4 +1,4 @@
-import { To as DinewayConfig } from "./types-BkQ-l1Y5.mjs";
+import { Oo as DinewayConfig } from "./types-BcpWwh4c.mjs";
 
 //#region src/api/public-url.d.ts
 /**

package/dist/public-url-DjWfilkD.mjs

@@ -0,0 +1,46 @@
+//#region src/seo/public-url.ts
+const PLACEHOLDER_RE = /\{[^}]+\}/;
+const MULTIPLE_SLASHES_RE = /\/+/g;
+const UNSAFE_SLUG_RE = /[\\/?#\s]/;
+const UNSAFE_PATH_RE = /[\\?#\s]/;
+const DOT_SEGMENT_RE = /(?:^|\/)\.{1,2}(?:\/|$)/;
+/**
+* Returns a same-origin public URL, or null when the collection has no usable route.
+* urlField paths are authoritative, including case, trailing slash and locale prefix.
+* Pattern routes add locale prefixes and preserve the declared slash convention. Never infer a route from
+* a collection name when the site has not declared one.
+*/
+function resolveContentUrl(input) {
+	const { cfg, urlField, urlPattern } = input;
+	const locale = input.locale || cfg?.defaultLocale;
+	if (cfg && (!locale || !cfg.locales.includes(locale))) return null;
+	let path;
+	if (urlField) {
+		const value = input.data?.[urlField];
+		if (typeof value !== "string" || !value) return null;
+		path = value;
+	} else {
+		if (!urlPattern?.includes("{slug}") || !input.slug || UNSAFE_SLUG_RE.test(input.slug)) return null;
+		if (input.slug === "." || input.slug === "..") return null;
+		path = urlPattern.replaceAll("{slug}", encodeURIComponent(input.slug));
+		if (PLACEHOLDER_RE.test(path)) return null;
+		if (!path.startsWith("/")) path = `/${path}`;
+		if (path.startsWith("//")) return null;
+		path = path.replace(MULTIPLE_SLASHES_RE, "/");
+		if (cfg && (locale !== cfg.defaultLocale || cfg.prefixDefaultLocale)) path = `/${locale}${path}`;
+	}
+	if (!path.startsWith("/") || path.startsWith("//") || UNSAFE_PATH_RE.test(path)) return null;
+	try {
+		if (DOT_SEGMENT_RE.test(decodeURIComponent(path))) return null;
+		const origin = new URL(input.siteUrl);
+		if (!["http:", "https:"].includes(origin.protocol) || origin.username || origin.password) return null;
+		const url = new URL(path, origin.origin);
+		if (url.origin !== origin.origin) return null;
+		return url.href;
+	} catch {
+		return null;
+	}
+}
+
+//#endregion
+export { resolveContentUrl as t };

package/dist/{public-url-DFX2c_20.d.mts → public-url-UpDevWVD.d.mts}

@@ -1,5 +1,7 @@
-import { t as Database } from "./types-C8cUW9dh.mjs";
+import { i as CollectionWithFields } from "./types-Cd_2Jeqp.mjs";
+import { t as Database } from "./types-B2W3CeZN.mjs";
 import { Kysely } from "kysely";
+import { z } from "zod";
 
 //#region src/i18n/config.d.ts
 /**
@@ -77,6 +79,19 @@ declare function listPublicContent(db: Kysely<Database>, options: PublicContentO
 /** Resolve an explicit canonical without inventing path case or slash rules. */
 declare function resolveCanonicalUrl(value: string, siteUrl?: string): string | null;
 //#endregion
+//#region src/schema/public-discovery.d.ts
+type DiscoveryCollection = Pick<CollectionWithFields, "slug" | "fields" | "publicDiscovery">;
+/** Reject stale declarations before either SQL discovery or snapshot eligibility runs. */
+/**
+ * Apply declared exclusions to a native Live record or pre-mutation snapshot.
+ * Callers must separately check published/deleted status, SEO and canonical URLs.
+ * This does not authorize CMS access or make a Draft snapshot public.
+ */
+declare function satisfiesPublicDiscoveryRules(collection: DiscoveryCollection, content: {
+  data: Record<string, unknown>;
+  liveRevisionId?: unknown;
+}): boolean;
+//#endregion
 //#region src/seo/public-url.d.ts
 /** Collection routing accepts a complete stored path or a conventional slug pattern. */
 interface ResolveContentUrlInput {
@@ -96,4 +111,4 @@ interface ResolveContentUrlInput {
  */
 declare function resolveContentUrl(input: ResolveContentUrlInput): string | null;
 //#endregion
-export { PublicContentOptions as a, getFallbackChain as c, PublicContentEntry as i, getI18nConfig as l, resolveContentUrl as n, listPublicContent as o, resolveCanonicalUrl as r, I18nConfig as s, ResolveContentUrlInput as t, isI18nEnabled as u };
+export { PublicContentEntry as a, I18nConfig as c, isI18nEnabled as d, resolveCanonicalUrl as i, getFallbackChain as l, resolveContentUrl as n, PublicContentOptions as o, satisfiesPublicDiscoveryRules as r, listPublicContent as s, ResolveContentUrlInput as t, getI18nConfig as u };

package/dist/{publication-authorization-BmazS4K0.mjs → publication-authorization-Bq4B0KIL.mjs}

@@ -1,10 +1,10 @@
-import { i as encodeCursor, r as decodeCursor } from "./types-C9F2TLQV.mjs";
-import { t as SiteActivityRepository } from "./site-activity-CnrmnFRy.mjs";
-import { t as ReviewRequestRepository } from "./review-requests-D5CJ4JCy.mjs";
-import { a as getSiteSettingsWithDb } from "./settings-D-a7uy2z.mjs";
-import { n as buildStableActionHash, t as ReviewPayloadBuilder } from "./review-payload-BysRWpxS.mjs";
-import { t as SYSTEM_ACTOR_ID } from "./actor-D3A5PNkH.mjs";
-import { n as redactActivityRecord } from "./activity-Bm5x0dik.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-CFvpEEOl.mjs";
+import { t as SiteActivityRepository } from "./site-activity-kfZ9X0no.mjs";
+import { t as ReviewRequestRepository } from "./review-requests-DaYnr3XR.mjs";
+import { a as getSiteSettingsWithDb } from "./settings-CCqefqC9.mjs";
+import { n as buildStableActionHash, t as ReviewPayloadBuilder } from "./review-payload-BuLgXTY6.mjs";
+import { t as SYSTEM_ACTOR_ID } from "./actor-BraTCiOp.mjs";
+import { n as redactActivityRecord } from "./activity-DWlF3FUa.mjs";
 import { ulid } from "ulidx";
 
 //#region src/database/repositories/content-release-grants.ts
@@ -13,7 +13,7 @@ var ContentReleaseGrantRepository = class {
 		this.db = db;
 	}
 	async createOrReplaceActive(input) {
-		return this.db.transaction().execute(async (transaction) => {
+		const operation = async (transaction) => {
 			const existing = await findActiveForTarget(transaction, input.collection, input.entryId, input.operation);
 			if (existing?.actionHash === input.actionHash) return existing;
 			const now = input.createdAt ?? (/* @__PURE__ */ new Date()).toISOString();
@@ -31,11 +31,16 @@ var ContentReleaseGrantRepository = class {
 			const created = await findById(transaction, id);
 			if (!created) throw new Error("Failed to create content release grant");
 			return created;
-		});
+		};
+		return this.db.isTransaction ? operation(this.db) : this.db.transaction().execute(operation);
 	}
 	async findById(id) {
 		return findById(this.db, id);
 	}
+	async findConfirmedPublication(input) {
+		const row = await this.db.selectFrom("_dineway_content_release_grants").selectAll().where("collection", "=", input.collection).where("entry_id", "=", input.entryId).where("reviewed_rev", "=", input.reviewedRev).where("draft_revision_id", "=", input.draftRevisionId).where("live_revision_id", input.liveRevisionId === null ? "is" : "=", input.liveRevisionId).where("operation", "=", "publish").where("status", "=", "consumed").where("authorization_method", "=", "human_action").where("authorized_by_actor_type", "=", "user").where("authorized_by_actor_id", "=", input.actorId).orderBy("created_at", "desc").orderBy("id", "desc").executeTakeFirst();
+		return row ? rowToGrant(row) : null;
+	}
 	async findActiveForTarget(collection, entryId, operation) {
 		return findActiveForTarget(this.db, collection, entryId, operation);
 	}
@@ -1153,4 +1158,4 @@ function errorReason(error) {
 }
 
 //#endregion
-export { HITL_REQUEST_STATUSES as a, HITL_REQUEST_PRIORITIES as i, PublicationAuthorizationService as n, HitlRequestRepository as o, ReleasePayloadBuilder as r, PublicationAuthorizationError as t };
+export { HITL_REQUEST_PRIORITIES as a, ContentReleaseGrantRepository as c, ReleasePayloadBuilder as i, PublicationAuthorizationService as n, HITL_REQUEST_STATUSES as o, publicationReceipt as r, HitlRequestRepository as s, PublicationAuthorizationError as t };

package/dist/{query-CrUftarl.mjs → query-BAfn0Uxp.mjs}

@@ -1,10 +1,10 @@
-import { a as __exportAll } from "./runner-BWZ87FK-.mjs";
+import { a as __exportAll } from "./runner-CQnzfBpD.mjs";
 import { n as getI18nConfig, r as isI18nEnabled, t as getFallbackChain } from "./config-CVssduLe.mjs";
 import { getRequestContext } from "./request-context.mjs";
-import { i as encodeCursor } from "./types-C9F2TLQV.mjs";
-import { o as isMissingTableError, s as takeLiveCollectionMeta, t as CURSOR_RAW_VALUES } from "./loader-BCr2VSzt.mjs";
+import { i as encodeCursor } from "./types-CFvpEEOl.mjs";
+import { o as isMissingTableError, s as takeLiveCollectionMeta, t as CURSOR_RAW_VALUES } from "./loader-CsX5pTud.mjs";
 import { i as contentNamespaces, n as cachedQuery, u as invalidateSchemaObjectCache } from "./object-cache-D51qOseS.mjs";
-import { r as requestCached } from "./request-cache-CBFjCwSt.mjs";
+import { r as requestCached } from "./request-cache-DoT2mKBT.mjs";
 
 //#region src/visual-editing/editable.ts
 /**
@@ -596,9 +596,9 @@ async function hydrateEntryBylines(type, entries) {
 		let needsQueryPath = parsed.some((item) => item.credits.length === 0 && (dataStr(item.data, "authorId") !== "" || dataStr(item.data, "primaryBylineId") !== ""));
 		let hasCustomFields = false;
 		if (!needsQueryPath) try {
-			const { getDb } = await import("./loader-BCr2VSzt.mjs").then((n) => n.i);
+			const { getDb } = await import("./loader-CsX5pTud.mjs").then((n) => n.i);
 			const db = await getDb();
-			const { getBylineFieldDefs } = await import("./field-defs-cache-sSdDeJXP.mjs").then((n) => n.t);
+			const { getBylineFieldDefs } = await import("./field-defs-cache-BIHTU5Yj.mjs").then((n) => n.t);
 			hasCustomFields = (await getBylineFieldDefs(db)).length > 0;
 		} catch (error) {
 			if (!isMissingTableError(error)) needsQueryPath = true;
@@ -612,7 +612,7 @@ async function hydrateEntryBylines(type, entries) {
 		}
 	}
 	try {
-		const { getBylinesForEntries } = await import("./bylines-YK6eGHvV.mjs").then((n) => n.t);
+		const { getBylinesForEntries } = await import("./bylines-CL8Z6AxI.mjs").then((n) => n.t);
 		const refs = entries.map((entry) => {
 			const data = entryData(entry);
 			const id = dataStr(data, "id");
@@ -670,12 +670,12 @@ async function hydrateEntryTerms(type, entries, locale) {
 				byTaxonomy: grouped
 			});
 		}
-		const { primeFoldedEntryTerms } = await import("./taxonomies-FKTevd14.mjs").then((n) => n.u);
+		const { primeFoldedEntryTerms } = await import("./taxonomies-xvaQ7gVM.mjs").then((n) => n.u);
 		primeFoldedEntryTerms(type, perEntry, { locale });
 		return;
 	}
 	try {
-		const { getAllTermsForEntries } = await import("./taxonomies-FKTevd14.mjs").then((n) => n.u);
+		const { getAllTermsForEntries } = await import("./taxonomies-xvaQ7gVM.mjs").then((n) => n.u);
 		const ids = entries.map((entry) => dataStr(entryData(entry), "id")).filter(Boolean);
 		if (ids.length === 0) return;
 		const termsMap = await getAllTermsForEntries(type, ids, { locale });
@@ -709,9 +709,9 @@ async function hydrateEntryTerms(type, entries, locale) {
 */
 async function getTranslations(type, id) {
 	try {
-		const db = (await import("./loader-BCr2VSzt.mjs").then((n) => n.i)).getDb;
+		const db = (await import("./loader-CsX5pTud.mjs").then((n) => n.i)).getDb;
 		const dbInstance = await db();
-		const { ContentRepository } = await import("./content-Bg_hMt4Q.mjs").then((n) => n.n);
+		const { ContentRepository } = await import("./content-CzUrmMC3.mjs").then((n) => n.n);
 		const repo = new ContentRepository(dbInstance);
 		const item = await repo.findByIdOrSlug(type, id);
 		if (!item) return {
@@ -779,8 +779,8 @@ async function resolveDinewayPath(path) {
 	const hasDbOverride = !!getRequestContext()?.db;
 	let patterns = !hasDbOverride ? cachedUrlPatterns : null;
 	if (!patterns) {
-		const { getDb } = await import("./loader-BCr2VSzt.mjs").then((n) => n.i);
-		const { SchemaRegistry } = await import("./registry-D3n4-yUl.mjs").then((n) => n.r);
+		const { getDb } = await import("./loader-CsX5pTud.mjs").then((n) => n.i);
+		const { SchemaRegistry } = await import("./registry-QxrUJAWY.mjs").then((n) => n.r);
 		patterns = (await new SchemaRegistry(await getDb()).listCollections()).filter((collection) => collection.urlPattern).map((collection) => {
 			const { regex, paramNames } = patternToRegex(collection.urlPattern);
 			return {

package/dist/{query-DPC5GT6e.mjs → query-MvFwA1uK.mjs}

@@ -1,7 +1,7 @@
-import { r as getDb } from "./loader-BCr2VSzt.mjs";
+import { r as getDb } from "./loader-CsX5pTud.mjs";
 import { n as cachedQuery, t as CacheNamespace } from "./object-cache-D51qOseS.mjs";
-import { r as requestCached } from "./request-cache-CBFjCwSt.mjs";
-import { n as SchemaRegistry } from "./registry-D3n4-yUl.mjs";
+import { r as requestCached } from "./request-cache-DoT2mKBT.mjs";
+import { n as SchemaRegistry } from "./registry-QxrUJAWY.mjs";
 
 //#region src/schema/query.ts
 /**

package/dist/{rate-limit-DvGL45wH.mjs → rate-limit-JhnJUEno.mjs}

@@ -1,5 +1,5 @@
-import { t as apiError } from "./error-Jz0EtEwI.mjs";
-import { n as normalizeTrustedHeaders } from "./trusted-proxy-NySPw95m.mjs";
+import { t as apiError } from "./error-BPA9T0AW.mjs";
+import { n as normalizeTrustedHeaders } from "./trusted-proxy-9b2fSXK2.mjs";
 import { sql } from "kysely";
 
 //#region src/auth/rate-limit.ts

package/dist/{redirect-8B-gorhg.mjs → redirect-CnG6nJ4H.mjs}

@@ -1,6 +1,6 @@
 import { a as currentTimestampValue } from "./dialect-helpers-fk43GbDb.mjs";
-import { i as encodeCursor, r as decodeCursor } from "./types-C9F2TLQV.mjs";
-import { i as matchPattern, n as interpolateDestination, r as isPattern, t as compilePattern } from "./patterns-CoqlXUvk.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-CFvpEEOl.mjs";
+import { i as matchPattern, n as interpolateDestination, r as isPattern, t as compilePattern } from "./patterns-CP9gkiCE.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 

package/dist/{redirects-DdPaQiWQ.mjs → redirects-C9pg6Dcg.mjs}

@@ -1,5 +1,6 @@
-import { t as isSafeHref } from "./url-C05Zz4pW.mjs";
-import { n as isTerminalStatus, t as REDIRECT_RULE_STATUSES } from "./status-xz9JACSX.mjs";
+import { r as publicDiscoveryRulesSchema } from "./public-discovery-CyDzK1-S.mjs";
+import { t as isSafeHref } from "./url-CmjWycVK.mjs";
+import { n as isTerminalStatus, t as REDIRECT_RULE_STATUSES } from "./status-BdZSXIP_.mjs";
 import { z } from "zod";
 
 //#region src/api/schemas/common.ts
@@ -539,6 +540,7 @@ const createCollectionBody = z.object({
 	source: z.string().regex(collectionSourcePattern).optional(),
 	urlPattern: urlPatternSchema.optional(),
 	urlField: urlFieldSchema.optional(),
+	publicDiscovery: publicDiscoveryRulesSchema.nullish(),
 	hasSeo: z.boolean().optional()
 }).meta({ id: "CreateCollectionBody" });
 const updateCollectionBody = z.object({
@@ -549,6 +551,7 @@ const updateCollectionBody = z.object({
 	supports: z.array(collectionSupportValues).optional(),
 	urlPattern: urlPatternSchema.nullish(),
 	urlField: urlFieldSchema.nullish(),
+	publicDiscovery: publicDiscoveryRulesSchema.nullish(),
 	hasSeo: z.boolean().optional(),
 	commentsEnabled: z.boolean().optional(),
 	commentsModeration: z.enum([
@@ -605,6 +608,7 @@ const collectionSchema = z.object({
 	source: z.string().nullable(),
 	urlPattern: z.string().nullable(),
 	urlField: z.string().nullish(),
+	publicDiscovery: publicDiscoveryRulesSchema.nullish(),
 	hasSeo: z.boolean(),
 	createdAt: z.string(),
 	updatedAt: z.string()

package/dist/{redirects-D2SVS1zo.mjs → redirects-lCwNKPUn.mjs}

@@ -1,8 +1,8 @@
-import { t as OptionsRepository } from "./options-DQPTH5n0.mjs";
-import { t as RedirectRepository } from "./redirect-8B-gorhg.mjs";
-import { a as validateDestinationParams, i as matchPattern, n as interpolateDestination, o as validatePattern, r as isPattern, t as compilePattern } from "./patterns-CoqlXUvk.mjs";
-import { i as invalidateRedirectCache } from "./cache-BuVpjvBc.mjs";
-import { n as isTerminalStatus } from "./status-xz9JACSX.mjs";
+import { t as OptionsRepository } from "./options-1dBRkoCl.mjs";
+import { t as RedirectRepository } from "./redirect-CnG6nJ4H.mjs";
+import { a as validateDestinationParams, i as matchPattern, n as interpolateDestination, o as validatePattern, r as isPattern, t as compilePattern } from "./patterns-CP9gkiCE.mjs";
+import { i as invalidateRedirectCache } from "./cache-DrNKKDn0.mjs";
+import { n as isTerminalStatus } from "./status-BdZSXIP_.mjs";
 
 //#region src/redirects/loops.ts
 /**